| name | dsar-intake-system |
| title | Building a Universal DSAR Intake System |
| description | Builds a multi-channel DSAR intake system supporting web form, email, phone, and in-person requests with identity verification tiers, automated routing logic, SLA tracking, and response generation. Activate for DSAR intake, rights request portal, multi-channel intake, SLA tracking, request management queries. |
| author | mukul975 |
| author_url | https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/dsar-intake-system |
| license | Apache-2.0 |
| version | 0.1.0 |
| execution_mode | open |
| jurisdiction | gb |
| practice | data-protection |
| language | en |
Building a Universal DSAR Intake System
Overview
A universal DSAR intake system centralises the receipt, verification, routing, and tracking of all data subject rights requests across multiple channels. This skill provides the architectural design, identity verification framework, routing logic, SLA management, and response generation capabilities needed to operate a compliant and efficient rights request management programme.
System Architecture
Multi-Channel Intake
The intake system must accept requests from all channels through which data subjects may contact the organisation:
| Channel | Intake Method | Processing |
|---|
| Web form | Dedicated privacy rights portal at meridiananalytics.co.uk/privacy/rights | Automated capture, structured data, immediate acknowledgement |
| Email | dsar@meridiananalytics.co.uk (dedicated monitored inbox) | Semi-automated: email parser extracts key fields, manual triage |
| Telephone | Privacy hotline: +44 20 7946 0958 (staffed Mon-Fri 09:00-17:00 GMT) | Agent-assisted: agent completes intake form during call |
| Postal mail | Data Protection Office, 47 Canary Wharf Tower, London E14 5AB | Manual: scanned, digitised, entered into system within 2 business days |
| In-person | Reception desk at registered office | Agent-assisted: staff member completes intake form |
| Social media | Direct messages on official channels | Redirect to formal channel; do not process rights requests via social media |
Central Request Register
All requests from all channels feed into a single central register with the following record structure:
| Field | Description |
|---|
| Reference | Auto-generated: [TYPE]-YYYY-NNNN (e.g., DSAR-2026-0142) |
| Receipt date | UTC timestamp of initial receipt |
| Channel | Source channel |
| Request type | Access (Art. 15), Erasure (Art. 17), Portability (Art. 20), Restriction (Art. 18), Rectification (Art. 16), Object (Art. 21), Marketing opt-out (Art. 21(2)), Automated decision (Art. 22), CCPA know, CCPA delete, CCPA opt-out |
| Data subject name |
